Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Выше рынка
$124к-329к/год
$140к$160кмедиана$200к
По похожим ролям (48) ~ $160к/год
На СНГ рынке: $4.2к/мес ($2.3к - $5.5к)
89
Отличная вакансия
развернуть
Company hidden предлагает хорошо очерченную senior-роль в киберрисках, зарплату выше рыночного ориентира и работу над безопасностью крупной платформы для разработчиков; при этом очень широкий диапазон оставляет неопределённость по конкретному предложению.
Кликните для подробной информации
Широкий диапазонВыше рынкаПонятные задачиИзвестная платформа
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Risk Analyst (Cybersecurity): Conducting technical security capability assessments and developing quantified cyber risk scenarios for GitHub with an accent on NIST frameworks, FAIR-style analysis, and risk reporting. Focus on evaluating control maturity, translating technical findings into risk treatments, and tracking remediation through GRC systems.
Location: Remote, United States
Salary: USD $124,000–$329,200 per year
Company
hirify.global is an AI-powered developer platform and open-source collaboration community used by developers and organizations worldwide.
What you will do
Lead security capability risk assessments, including scoping against NIST CSF subcategories, stakeholder interviews, maturity scoring, and assessment reporting.
Analyze data from multiple sources to identify, prioritize, and quantify technical risks and potential business impact.
Develop FAIR-style cyber risk scenarios and evaluate security capabilities against established frameworks.
Partner with engineering, security, and product experts to validate findings and produce practical risk recommendations.
Manage risk treatment plans, monitor remediation progress, escalate unresolved risks, and maintain the risk register.
Provide recurring risk updates and reporting to technical and non-technical leaders.
Requirements
7+ years of experience in security analysis, cybersecurity, security engineering, software engineering, or a related field, with degree-based alternatives accepted.
5+ years of experience applying security or control frameworks such as NIST CSF, NIST SP 800-53, or ISO/IEC 27001.
5+ years of experience in technical risk management, information security, audit, or compliance.
Ability to work remotely from the United States.
Nice to have
Experience with cyber risk quantification using FAIR or a comparable quantitative risk analysis method.
Experience with GRC platforms such as ZenGRC, ServiceNow GRC, or Archer.
Experience using Azure Data Explorer, KQL, Excel, Google Sheets, SQL, or Python for risk reporting, metrics, or automation.
CISSP, CRISC, CISA, Open FAIR, or a comparable certification.
Culture & Benefits
Remote-first working environment with flexibility in how work is performed.
Inclusive culture centered on transparency, teamwork, and supporting colleagues.
Competitive base pay with eligible bonus, stock, and other rewards depending on role and individual impact.
Learning and growth opportunities with benefits designed to support employees.
Values include customer focus, ownership, continuous learning, clarity, and inclusion.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →